3 matches found
Cross-site Scripting in Graylog Server
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...
6.1CVSS0.9AI score0.00848EPSS
SaveExploits0References4Affected Software1
Cross site scripting
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...
4.3CVSS6AI score0.00848EPSS
SaveExploits0References2Affected Software1
CVE-2018-11650: Improper Neutralization of Input During Web Page Generation
Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...
6.1CVSS6.4AI score0.00848EPSS
SaveExploits0References2
20